Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/B3DED5C6BAC911EB8533B615C4F9AE02.roa
File:                     B3DED5C6BAC911EB8533B615C4F9AE02.roa (raw, json)
Hash identifier:          +nAEEuzzAHJ64g2Y+I53w9dhyFuYT2+b3syIj71QLeM=
Subject key identifier:   C0:F1:B7:D8:D6:93:02:38:68:A7:58:44:19:C9:5A:7B:10:17:98:EF
Certificate issuer:       /CN=A9160C95/serialNumber=B48E4073B810BCF9C794819C80FDE71D53F2DE2C
Certificate serial:       0695
Authority key identifier: B4:8E:40:73:B8:10:BC:F9:C7:94:81:9C:80:FD:E7:1D:53:F2:DE:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/B3DED5C6BAC911EB8533B615C4F9AE02.roa
Signing time:             Thu 07 May 2026 06:37:21 +0000
ROA not before:           Thu 07 May 2026 06:37:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     131447
IP address blocks:        103.7.56.0/22 maxlen: 23
                          150.107.28.0/22 maxlen: 22
                          150.107.28.0/24 maxlen: 24
                          150.107.30.0/24 maxlen: 24
                          150.107.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.crl
                          rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:35:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1685 (0x695)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160C95, serialNumber=B48E4073B810BCF9C794819C80FDE71D53F2DE2C
        Validity
            Not Before: May  7 06:37:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69fc3320-dc70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f9:1c:64:55:33:c2:38:a3:38:a9:ee:c5:ee:
                    4c:99:34:b6:63:36:de:da:ac:9f:48:73:5e:ef:b9:
                    6c:1a:eb:bd:d5:2d:be:6d:63:db:3e:e5:bb:22:e3:
                    12:9b:d0:37:64:04:c8:88:c7:76:d8:e3:8f:a4:41:
                    5a:2b:c9:c9:ca:cb:f8:f2:4b:51:e4:d4:68:8a:7f:
                    31:97:c3:45:4c:a3:e1:7e:76:b6:4b:3a:16:d9:c7:
                    53:8b:8d:26:71:b8:60:0b:20:f1:a8:bb:e2:a1:07:
                    23:f6:d0:58:56:3d:3e:06:dc:d3:4b:bf:3b:29:62:
                    d7:2e:8a:3f:f7:f6:2c:f1:24:95:68:af:b7:db:2a:
                    c2:ae:10:4f:0d:60:da:1d:e4:89:50:47:94:6a:23:
                    82:99:2c:8d:51:0b:4e:0b:03:8b:72:da:2e:b3:01:
                    31:4c:e2:b1:a4:59:4d:dc:18:c1:e1:6f:b5:8d:94:
                    7b:12:a4:a1:56:ad:32:7e:3b:94:fe:ee:d0:e9:06:
                    ed:e3:40:f3:32:3c:3d:ce:cc:54:3c:7d:59:27:06:
                    cd:62:7b:ec:e0:f7:f1:33:07:4e:e3:7c:9b:85:37:
                    8b:e2:6a:89:18:22:d7:61:af:b0:50:37:66:97:61:
                    ae:89:db:d1:03:1a:97:e1:1e:a2:c5:57:9d:7b:d4:
                    08:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F1:B7:D8:D6:93:02:38:68:A7:58:44:19:C9:5A:7B:10:17:98:EF
            X509v3 Authority Key Identifier:
                keyid:B4:8E:40:73:B8:10:BC:F9:C7:94:81:9C:80:FD:E7:1D:53:F2:DE:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/B3DED5C6BAC911EB8533B615C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.56.0/22
                  150.107.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:ea:db:9b:0f:71:86:14:b4:71:bc:b0:e4:c8:fd:77:be:19:
         0f:23:23:df:6a:1b:77:25:6d:22:4b:f5:51:fd:da:6b:4a:b3:
         3d:3b:a2:74:ee:d3:4e:0c:fc:be:ca:36:70:0c:21:28:8a:ac:
         24:f7:79:c3:8f:bd:14:8f:fd:6a:1a:42:bb:24:10:66:23:ae:
         e5:66:4d:aa:74:f8:a4:a4:54:0b:85:9e:7a:44:cd:2e:9a:ab:
         b3:c8:eb:ad:e2:d5:ba:b6:da:fb:d4:a5:cc:76:3a:7a:2d:b8:
         a4:1c:c5:9d:01:75:96:2b:86:4f:af:0b:13:18:9d:24:37:08:
         f5:28:97:98:a5:4b:4a:11:23:f1:4c:de:4b:bc:cb:6a:78:6f:
         76:9b:66:c8:62:ba:67:4e:80:46:20:50:d9:b7:c4:ea:9a:7a:
         f9:66:4b:a8:ef:8a:77:f2:54:9c:26:72:d3:42:27:ce:54:57:
         e0:f4:ac:95:1d:55:b7:58:f9:28:12:ec:07:ff:62:cf:4d:3c:
         cd:e4:e3:54:84:d9:0c:35:1a:78:41:af:e3:77:31:30:34:42:
         fe:44:81:2b:04:c8:d9:9a:78:8a:1d:3b:9d:47:f6:55:7c:c1:
         8e:81:c5:3b:55:a8:dd:26:37:18:0e:b1:a5:28:6c:d4:8f:88:
         39:45:4b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:47 2026 by rpki-client